Honeypots mailing list archives

Re: problems with honeyd 0.8b and ethernet emulation


From: VHP3 <vhp3 () cox net>
Date: Wed, 25 Aug 2004 22:59:25 -0500

I've had the same kind of problems. First, if you could, please post your entire honeyd config file for reference and the output "ifconfig -a". But until then, check that a) the MAC address listed in the config file is idential to the MAC listed on ifconfig and
b) your binding the 'testrouter' to the IP in the config file
c) to pass the IP address as an argument on the CLI (or script if that's how your starting the honeyd daemon)

Regards,
Vince

LECLERCQ Eric RD-MAPS-ISS wrote:

Hi,
I'm having trouble with honeyd and the "set xxx ethernet" command.

# honeyd.conf
create testrouter
set testrouter ethernet "cisco"
bind 192.168.1.4 testrouter

$ ifconfig eth0 192.168.1.28 netmask 255.255.255.0

$ honeyd -d -f h.conf -i eth0
Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos
honeyd: epoll_create: Function not implemented
honeyd[27788]: started with -d -f h.conf -i eth0
honeyd[27788]: listening promiscuously on eth0: (arp or ip proto 47 or (ip )) and not ether src 00:50:56:fe:ec:e8 honeyd.conf:3: Template "testrouter" is configured with ethernet address but there is no interface that can reach 192.168.1.4
honeyd: parsing configuration file failed

But 192.168.1.4 _is_ reachable with my network route.

However with 192.168.1.33 (or any IP beyond that) as the honeypot's address Honeyd works just fine.

Is this a problem with the code (network_compare() or else...) or am I missing something there?




Current thread: